Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/af2c573a-f8ef-330d-9d39-a46c409fb85a.roa
File:                     af2c573a-f8ef-330d-9d39-a46c409fb85a.roa (raw, json)
Hash identifier:          dOr0ZKzOucG+s6Gm8qWguS2y/9CzoxyJgR7RM+BKO0A=
Subject key identifier:   5C:2D:29:AF:1E:36:B6:39:92:C9:0E:A3:9D:53:FE:8A:90:08:6B:10
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584F498B51B6BB29A182762D6B80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/af2c573a-f8ef-330d-9d39-a46c409fb85a.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     200999
IP address blocks:        2001:470:479::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8b:51:b6:bb:29:a1:82:76:2d:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=728ed4f4-eeb6-4973-a0f2-a14372ab7754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:32:4b:21:3c:7e:ef:37:3a:72:89:c6:8d:8d:
                    f8:d3:2e:53:82:94:2f:b7:4d:d0:55:3c:a4:95:21:
                    ad:4d:08:b0:33:4e:c9:0c:6e:7b:be:39:fd:7c:b3:
                    fa:30:54:2b:e7:5f:df:ae:9d:eb:b1:ca:73:19:ea:
                    1d:73:91:c3:a5:e4:23:5c:fa:a0:db:0b:a7:d9:c0:
                    ec:51:d4:d3:fc:7d:93:4c:99:58:3a:30:63:2b:ae:
                    4e:1c:c9:a2:07:0b:24:af:91:c1:9f:fe:28:92:9a:
                    a8:0b:2d:76:c1:9e:dc:00:2b:5f:e1:4e:1c:e0:b2:
                    d5:72:2d:1c:88:5e:04:ed:9d:8c:82:2b:90:f2:94:
                    d0:7f:c0:7f:7e:86:ba:fc:81:4f:c4:15:ca:ad:85:
                    17:8d:c3:d3:cb:9b:1f:b5:8e:ae:25:e3:b2:54:c3:
                    14:6d:52:c8:fa:5e:08:50:e0:a1:bc:f8:ea:2f:e7:
                    53:86:64:49:73:88:f7:85:11:f8:b4:62:b6:9b:52:
                    f1:64:ae:da:95:6f:6f:66:b1:75:a9:31:3b:6a:4a:
                    4e:59:65:13:50:86:8c:a7:62:3c:5e:41:b4:1d:d5:
                    5b:6f:a4:d5:0e:53:50:46:8d:ac:a0:12:35:99:18:
                    4e:25:44:01:1d:d9:66:e5:c8:76:3e:c8:3e:f8:93:
                    97:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:2D:29:AF:1E:36:B6:39:92:C9:0E:A3:9D:53:FE:8A:90:08:6B:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/af2c573a-f8ef-330d-9d39-a46c409fb85a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:479::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:f0:65:06:ee:33:d8:d7:1c:e5:e9:e7:c4:48:a0:a0:0e:db:
         37:b0:6d:fb:4f:fb:ab:c9:b4:02:1c:90:f9:1d:32:98:63:b3:
         a2:f9:a2:1c:8d:1f:94:1a:7a:10:45:0f:37:1d:d8:02:ec:46:
         19:53:5d:78:d0:e6:5b:77:74:83:50:55:23:88:c9:9b:86:ad:
         e6:f2:8f:51:69:55:79:df:37:95:fe:e5:12:a9:eb:3d:7d:6e:
         97:34:69:48:d8:2b:f4:4b:9e:25:5a:a2:45:79:11:a5:d2:ea:
         49:c9:72:bc:57:ae:bf:e1:ac:06:89:f5:74:71:e5:73:af:0d:
         6a:3c:b5:f4:a2:f1:aa:3d:cb:99:7c:4d:d4:d5:7e:09:2e:04:
         a1:f6:07:84:05:e2:c3:11:e8:c5:20:90:31:30:25:c8:45:b0:
         94:77:bb:db:32:98:0a:f8:4c:b4:12:4f:d6:1c:9a:ec:21:64:
         29:d8:20:2c:e5:bf:1c:7a:49:95:2e:50:f2:0d:d7:2a:ae:a6:
         70:56:da:81:52:d1:b1:1b:06:45:32:9b:75:03:f6:bf:f7:40:
         f0:8c:d9:00:17:ef:7b:dd:78:6a:40:dc:c1:d8:8d:3c:bf:87:
         15:cd:bf:ff:bc:58:88:49:94:51:36:77:dc:ff:b9:82:d5:8d:
         63:56:7b:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:24:21 2026 by rpki-client